Assigning data classification levels can help with all of the following except:

A.
The grouping of classified information with hierarchical and restrictive security

B.
Ensuring that nonsensitive data is not being protected by unnecessary controls

C.
Extracting data from a database

D.
Lowering the costs of protecting data

Explanation:
C: Data classification does not involve the extraction of data from a database. However, data classification can be used to dictate who has access to read and write data that
is stored in a database. Each classification should have separate handling requirements and procedures pertaining to how that data is accessed, used, and destroyed. For
example, in a corporation, confidential information may only be accessed by senior management. Auditing could be very detailed and its results monitored daily, and degaussing
or zeroization procedures may be required to erase the data. On the other hand, information classified as public may be accessed by all employees, and no special auditing or
destruction methods required.
A is incorrect because assigning data classification levels can help with the grouping of classified information with hierarchical and restrictive security. Data that shares the
same classification, for example, can be grouped together and assigned the same handling requirements and procedures pertaining to how it is accessed, used, and destroyed.
B is incorrect because assigning data classification levels can help ensure that nonsensitive data is being protected by the necessary controls. Data classification directly
deals with ensuring that the different levels of sensitive data are being protected by the necessary controls. This answer is very tricky because of all the negatives, so make sure
to read questions and answers slowly.
D is incorrect because data classification helps ensure data is protected in the most cost-effective manner. Protecting and maintaining data costs money, but it is important to
spend this money for the information that actually requires protection. For example, data that is classified confidential may require additional access controls as compared to
public data to restrict access. It may also require additional auditing and monitoring. This may be appropriate for a soda company’s proprietary recipe, but it would be a waste of
resources if those same measures were implemented for the soda company’s employee directory.